Openbravo Issue Tracking System - Openbravo ERP
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0013350Openbravo ERPA. Platformpublic2010-05-18 09:062010-06-17 00:00
Reportermtaal 
Assigned Tomtaal 
PrioritynormalSeveritymajorReproducibilityhave not tried
StatusclosedResolutionfixed 
PlatformOS5OS Version
Product Versionpi 
Target VersionpiFixed in Version 
Merge Request Status
Review Assigned To
OBNetwork customer
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0013350: The entity access checker is initialized in the context of the user, gives access denied exception
DescriptionWhen calling an OBDal api the OBContext.getEntityAccessChecker method is initialized in the user context. This gives problems as the entity access checker initialization reads table and other AD information for which a user does not necessarily has access.


 
Steps To Reproduce
Proposed SolutionThe entityAccessChecker.initialize method must be run in admin mode
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2010-05-18 09:06mtaalNew Issue
2010-05-18 09:06mtaalAssigned To => mtaal
2010-05-24 08:43alostaleStatusnew => scheduled
2010-05-24 08:43alostalefix_in_branch => pi
2010-05-26 07:52hgbotCheckin
2010-05-26 07:52hgbotNote Added: 0027736
2010-05-26 07:52hgbotStatusscheduled => resolved
2010-05-26 07:52hgbotResolutionopen => fixed
2010-05-26 07:52hgbotFixed in SCM revision => http://code.openbravo.com/erp/devel/pi/rev/1f1c212343ccd8927dbfdaddb629239cd93ced14 [^]
2010-06-03 22:49hudsonbotCheckin
2010-06-03 22:49hudsonbotNote Added: 0027929
2010-06-16 10:35iperdomoNote Added: 0028490
2010-06-16 10:35iperdomoStatusresolved => closed
2010-06-17 00:00anonymoussf_bug_id0 => 3017325

Notes
(0027736)
hgbot   
2010-05-26 07:52   
Repository: erp/devel/pi
Changeset: 1f1c212343ccd8927dbfdaddb629239cd93ced14
Author: Martin Taal <martin.taal <at> openbravo.com>
Date: Wed May 26 07:52:02 2010 +0200
URL: http://code.openbravo.com/erp/devel/pi/rev/1f1c212343ccd8927dbfdaddb629239cd93ced14 [^]

fixes issue 13350: The entity access checker is initialized in the context of the user, gives access denied exception

---
M src/org/openbravo/dal/security/EntityAccessChecker.java
---
(0027929)
hudsonbot   
2010-06-03 22:49   
A changeset related to this issue has been promoted to main after passing a series of tests and an OBX has been generated:

Changeset: http://code.openbravo.com/erp/devel/main/rev/1f1c212343cc [^]
Merge Changeset: http://code.openbravo.com/erp/devel/main/rev/c011484a38d9 [^]
Tests: http://builds.openbravo.com/view/int/ [^]
OBX: http://builds.openbravo.com/erp/core/obx/OpenbravoERP-2.50CI.17407.obx [^]
(0028490)
iperdomo   
2010-06-16 10:35   
Tested on pi @ rev ced7876366af